c25756f91c
Includes multiple security fixes mentioned in https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/ (unfortunately, no CVE numbers as of yet) - Directory Traversal to Arbitrary File Read - Account Takeover Through Expired Link - Server Side Request Forgery Through Deprecated Service - Group Two-Factor Authentication Requirement Bypass - Stored XSS in Merge Request Pages - Stored XSS in Merge Request Submission Form - Stored XSS in File View - Stored XSS in Grafana Integration - Contribution Analytics Exposed to Non-members - Incorrect Access Control in Docker Registry via Deploy Tokens - Denial of Service via Permission Checks - Denial of Service in Design For Public Issue - GitHub Tokens Displayed in Plaintext on Integrations Page - Incorrect Access Control via LFS Import - Unescaped HTML in Header - Private Merge Request Titles Leaked via Widget - Project Namespace Exposed via Vulnerability Feedback Endpoint - Denial of Service Through Recursive Requests - Project Authorization Not Being Updated - Incorrect Permission Level For Group Invites - Disclosure of Private Group Epic Information - User IP Address Exposed via Badge images - Update postgresql (GitLab Omnibus)
13 lines
341 B
JSON
13 lines
341 B
JSON
{
|
|
"version": "12.8.2",
|
|
"repo_hash": "1d27s61kglryr5pashwfq55z7fh16fxkx1m4gc82xihwfzarf4x9",
|
|
"owner": "gitlab-org",
|
|
"repo": "gitlab",
|
|
"rev": "v12.8.2-ee",
|
|
"passthru": {
|
|
"GITALY_SERVER_VERSION": "12.8.2",
|
|
"GITLAB_PAGES_VERSION": "1.16.0",
|
|
"GITLAB_SHELL_VERSION": "11.0.0",
|
|
"GITLAB_WORKHORSE_VERSION": "8.21.0"
|
|
}
|
|
} |